InfoBrief | The Evolving Role of the CISO | Check Point Software
InfoBrief | The Evolving Role of the CISO
The Changing Role of the CISO Today's Chief Information Security Officer (CISO) is an architect and business leader.
The Reality of a CISO’s Role is Different than Most Think
Everyone agrees that a CISO is more than just a cybersecurity person. The role also needs a mix of IT architecture, people, business, and communication skills.
Skills Required for CISOs:
- Awareness and understanding of the latest cybersecurity threats
- IT architecture and engineering skills
- Cybersecurity architecture and engineering skills
- Cybersecurity policy formulation and application
- Leadership and team-building skills
- Business management skills
- Technical knowledge
- Broad understanding of the security field
- Project management skills
- Compliance and legal knowledge
- Communication skills with upper management/boards
CISOs Hold Themselves to a High Standard
How satisfied are you with your CISO's response to the recent breach?
Satisfaction Levels:
- Organizations have more confidence in their CISOs than CISOs do of themselves.
| CIOs | CISOs | |
|---|---|---|
| Satisfied with response | 94% | 85% |
| Overall satisfaction | 67% | 9% |
Despite Being in a Strategic Role, CISOs Have Tactical Concerns
CISOs are most concerned with inflation's impact on budget and the impact of recession on expected business revenue.
Risk Factors:
- Inflation driving up vendor pricing beyond budget expectations: CIO 16%, CISO 23%
- Impact of recession on expected business revenue: CIO 15%, CISO 18%
CIO and CISO Priorities Are Not Aligned
CIOs and CISOs have different views of the CISO's role.
| CIO’s Areas of Priority | CISO’s Areas of Priority |
|---|---|
| Ensuring cybersecurity requirements are met before technology investments are made | 46% |
| Analyzing security vulnerabilities requiring IT remediation | 18% |
| Ensuring network security through firewall management | 10% |
More Tenured CISOs Focus on Customer Support and Business Strategy
CISOs are balancing real fears of sophisticated cyberattacks with supporting growth initiatives.
How CISOs Spend Their Time:
- Cybersecurity tactics and procedures
- Compliance
- Leadership and risk management
- Executive/business strategy and architecture
Security Executives Are Looking to Drive Business Initiatives
What is the most important way you see your role evolving over the next 12–24 months?
| Evolution Focus | Percentage |
|---|---|
| Traditional security responsibilities | 39% |
| Business-focused role in the C-suite | 5% |
| Broaden role to be a business leader | 33% |
Key Takeaway
As security practitioners move higher in the organization, their skills and knowledge must evolve. CISOs should consult and coordinate with several stakeholders including compliance, risk management, and overall leadership to drive business outcomes.